Compliance Analyst

Role: Compliance Analyst

Exp: 1-2 Years

Work Mode: Mohali, WOrk form Office

Time: 10am - 8pm IST

 

 

Role Summary
RChilli is seeking a Compliance Analyst to support IT compliance, information security governance, and regulatory
readiness across ISO/IEC 27001:2022, SOC 2 Type II, HIPAA, PCI DSS, and GDPR, with awareness of emerging
AI governance requirements such as the EU AI Act and ISO/IEC 42001 considered an advantage. The role involves
maintaining compliance documentation and internal controls, supporting internal and external audits, reviewing
departmental Standard Operating Procedures (SOPs), identifying compliance gaps, coordinating corrective actions,
and working with cross-functional teams to strengthen organizational compliance.
Key Responsibilities
 Support the development, implementation, and maintenance of compliance programs and controls covering
ISO/IEC 27001:2022, SOC 2 Type II, HIPAA, PCI DSS, GDPR, and other applicable requirements.
 Create, review, organize, and maintain policies, procedures, SOPs, standards, control records, and audit-ready
evidence.
 Assist with periodic internal compliance reviews, control testing, risk assessments, gap identification, and
remediation planning.
 Coordinate evidence collection, documentation, auditor requests, and follow-up activities for internal and
external audits and assessments.
 Record audit findings, maintain action trackers, follow up with control owners, and verify completion of corrective
and preventive actions.
 Plan and assist with SOP reviews across IT, HR, Operations, Finance, Sales, Marketing, and other
departments; Audit and check that documented processes are accurate, current, and followed.
 Help teams draft, revise, standardize, and implement SOPs; document gaps, inefficiencies, and opportunities for
process improvement.
 Prepare clear audit summaries, compliance status reports, risk observations, and written recommendations for
relevant stakeholders.
 Collaborate with department heads and cross-functional teams to gather requirements, maintain documentation,
and communicate findings and progress.
 Assist with compliance awareness and training initiatives and ongoing monitoring of internal policies, standards,
and regulatory requirements.
 Use or learn GRC platforms such as Drata, Vanta, or equivalent tools to maintain control evidence, tasks, and
compliance records.
Must-have Skills
 Foundational understanding of information security compliance, internal controls, risk management, and audit
processes.
 Working knowledge of ISO 27001 and familiarity with frameworks such as SOC 2 Type II, HIPAA, PCI DSS, or
GDPR.
 Ability to draft and review SOPs, policies, audit reports, checklists, and compliance evidence with strong
attention to detail.

 Ability to identify gaps, track remediation items, and coordinate deliverables across multiple departments.
 Strong written and verbal communication, analytical thinking, organizational skills, and proficiency in MS Office.
Good-to-have Skills
 Hands-on experience with Drata, Vanta, or another governance, risk, and compliance (GRC) tool.
 Exposure to ISO 27001, SOC 2, HIPAA, PCI DSS, or GDPR audit preparation, evidence collection, or control
implementation.
 Awareness of the EU AI Act, ISO/IEC 42001, and other AI governance or regulatory frameworks.
 Basic understanding of IT infrastructure, databases, networking, and data-protection practices.
Qualifications & Experience
 1–2 years of experience in compliance, information security governance, internal audit, risk management, SOP
auditing, or a closely related area.
 Bachelor’s degree in IT, Information Security, Business, Law, or a relevant discipline preferred.
 Relevant certifications or training in information security auditing, ISO 27001, or compliance are an advantage,
not mandatory.

APPLY